Medium
CVE-2024-11282
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2024-11749
App Embed <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13095
WP Triggers Lite <= 2.5.3 - Authenticated (Admin+) SQL Injection
Medium
CVE-2025-22298
Hive Support – WordPress Help Desk <= 1.1.6 - Missing Authorization
Medium
CVE-2024-12774
Altra Side Menu <= 2.0 - Cross-Site Request Forgery to Arbitrary Menu Deletion
Medium
CVE-2025-22313
Widgetize Pages Light <= 3.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-54249
Advanced Options Editor <= 1.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-54237
Ni CRM Lead <= 1.3.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-24632
Advanced Dynamic Pricing for WooCommerce <= 4.9.0 - Reflected Cross-Site Scripting
Medium
CVE-2025-24635
Paytm Payment Donation <= 2.3.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-24630
Learning Management System, eLearning, Course Builder, WordPress LMS Plugin – Sikshya LMS <= 0.0.21 - Reflected Cross-Site Scripting
Medium
CVE-2025-53349
Kalium <= 3.18.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-12279
WP Social AutoConnect <= 4.6.2 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Medium
CVE-2024-12475
WP Multi Store Locator <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12221
Turnkey bbPress by WeaverTheme <= 1.6.3 - Reflected Cross-Site Scripting via _wpnonce Parameter
Medium
CVE-2024-11930
Taskbuilder – WordPress Project & Task Management plugin <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via wppm_tasks Shortcode
Medium
CVE-2024-12545
Scratch & Win – Giveaways and Contests <= 2.7.1 - Cross-Site Request Forgery via reset_installation Function
Medium
CVE-2024-11974
Media Library Assistant <= 3.23 - Reflected Cross-Site Scripting via smc_settings_tab, unattachfixit-action, and woofixit-action Parameters
Medium
CVE-2024-12047
WP Compress – Instant Performance & Speed Optimization <= 6.30.03 - Reflected Cross-Site Scripting via custom_server Parameter
High
CVE-2024-11733
WordPress Popular Posts <= 7.1.0 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2024-12237
Photo Gallery Slideshow & Masonry Tiled Gallery <= 1.0.15 - Authenticated (Subscriber+) Limited Server-Side Request Forgery
Medium
CVE-2025-22342
WP Simple Sitemap <= 0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2024-56282
WPMozo Addons Lite for Elementor <= 1.1.0 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-49700
ARPrice - WordPress Pricing Table Plugin <= 4.1.3 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.